25034 Commits

Author SHA1 Message Date
fd5ac51c9a Merge pull request #25898 from Honny1/fix-nolintlint
CI: Fix directive `//nolint:revive` is unused for linter "revive" on ARM
2025-04-16 20:11:15 +00:00
1143162e69 Merge pull request #25887 from fice-t/no-new-priv
docs: Expand description of no-new-privileges
2025-04-16 20:08:41 +00:00
bc9110c69f Update podman-systemd.unit.5.md
Table header in Pod units section was referring to podman container... instead of podman pod...

Signed-off-by: Andreas <43118918+eulores@users.noreply.github.com>
2025-04-16 21:52:11 +02:00
e498c6526b Quadlet - translate dependencies on other quadlet units
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-16 15:29:42 -04:00
69c2e68836 Fix directive //nolint:revive is unused for linter "revive" on ARM
Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-04-16 16:17:28 +02:00
ae63e2c932 Merge pull request #25876 from kolyshkin/golangci-v2-fup1
ci: fix two issues, remove unused exceptions
2025-04-16 13:21:24 +00:00
8690b20732 .golangci.yml: rm legacy and common-false-positives
Those were originally added by golangci-lint migrate, but currently do
not result in any warnings being suppressed.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
543a7ea062 pkg/bindings/containers: rm unused break
Reported by staticcheck linter:

> pkg/bindings/containers/term_windows.go:51:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
5f997a70bd cmd/podman/pods/create: fix break statement
This code was [somewhat messy but] correct until commit 51fbf3da9e
started to use switch instead of if, and since that time break is
breaking from the inner "switch" (rather than on the outer "for" as
originally intended).

This also fixes the following staticcheck warnings:

> cmd/podman/pods/create.go:242:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^
> cmd/podman/pods/create.go:245:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
b615011b44 docs: Expand description of no-new-privileges
Fixes: #25853

Signed-off-by: Alexander Gramiak <agrambot@gmail.com>
2025-04-15 14:48:42 -06:00
2a9b1499db Merge pull request #25879 from jankaluza/cloexec
Fix the fd leaking to aardvark-dns.
2025-04-15 19:52:18 +00:00
7b30f19535 chore(deps): update dependency golangci/golangci-lint to v2.1.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-15 15:53:06 +00:00
d9914ff27d Fix the fd leaking to aardvark-dns.
The openDirectory function is missing the unix.O_CLOEXEC flag.
As a result, this file descriptor can leak into the aardvark-dns
process which can then block the umount of rootfs - in this case,
the umount fails with "Device or Resource busy" error message.

This commits adds the unix.O_CLOEXEC to unix.Open call, resulting
in this fd to be closed on aardvark-dns exec.

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-04-15 13:24:03 +02:00
857b536507 test/system: add prefetch users to use cache image
When using a custom --root it will not have the image present and as
such cause a pull. We can however use our own local cache if present to
avoid the pull if we give the right podman options via
_PODMAN_TEST_OPTS.

I saw the volume quota test fail during the pull in openQA thus I
noticed this issue.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-15 12:36:40 +02:00
f691fa7dc4 Merge pull request #25874 from Luap99/lint
update golangci-lint to v2.1.1
2025-04-15 10:30:45 +00:00
fa8c2c856e Merge pull request #25872 from mheon/governance_add_related_projects
Two small updates to the Governance model
2025-04-15 09:49:15 +00:00
1a6431674f [CI:DOCS] Add link to MAINTAINERS.md file in GOVERNANCE.md
I noticed that the GOVERNANCE.md file did not have links to the
MAINTAINERS.md file.  Also added a link or two to the OWNERS file.

This change just adds links and does not change any wording.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-04-14 15:44:04 -04:00
09c2546b27 Merge pull request #25844 from ygalblum/quadlet-network-delete
Quadlet - allow deleting the network when stopping the service
2025-04-14 17:57:45 +00:00
f26765ceb0 update golangci-lint to v2.1.1
Fixes three new issues found by nilnesserr.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-14 19:33:42 +02:00
ae1e24f115 Two small updates to the Governance model
Firstly, include both subprojects in the model and link to them.
Ensures complete clarity on what is part of the Podman Project in
CNCF.

Secondly, add that Community Managers are expected to take notes
on Core Maintainer meetings and make those notes available to the
public.

Signed-off-by: Matt Heon <mheon@redhat.com>
2025-04-14 10:47:35 -04:00
f64204f651 Merge pull request #25840 from Luap99/list-manifest
vendor: update to latest c/common
2025-04-14 13:43:59 +00:00
4b148e593f Merge pull request #25856 from Luap99/flakes
Some minor flake cleanup/debugging/skips
2025-04-14 11:37:18 +00:00
18e20f8c34 Merge pull request #25837 from ninja-quokka/bump_precommit
Update pre-commit-hooks and Codespell hook
2025-04-14 10:11:40 +00:00
081629cf01 Update pre-commit-hooks and Codespell hook
pre-commit-hooks v3.4.0 -> v5.0.0
codespell 2.3.0 -> 3.4.1

Signed-off-by: Lewis Roy <lewis@redhat.com>
2025-04-13 14:26:34 +10:00
d3e2ca57e4 libpod: stats catch ErrStatCgroup
Stat() actually ignored ENOENT errors so there is no point in matching
them, instead of Stat() does not find a valid cgroup file it returns
ErrStatCgroup so match that instead.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 17:19:38 +02:00
86d7da8b08 vendor: update to latest c/common
Fixes a flake in the system tests during image listing.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 17:17:23 +02:00
a4856a6224 test/system: add debug for /etc/hosts restore flake
Somehow the files do not match sometimes, I like to get data on the
/etc/hosts file on the host looks to see if this would explain anything.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 16:21:03 +02:00
0849cbcf83 test/e2e: skip flaky restore into pod test
It is failing a lot, on the issue (#24571) there is a 100% reproducer
so we don't need to gather more data this is simply broken.

Reduce our flakes by skiping this until the main issue gets resolved.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 16:15:16 +02:00
0fb78905c1 Revert "Instrument cleanup tracer to log weird volume removal flake"
This reverts commit d633824a9527b9ec937cdfc8aacc890ec3249127.

The issue has been fixed in commit 9a0c0b2eef and I have not seen it
since so remove this special case.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 15:12:33 +02:00
0be44ccb20 test/system: add debug for healthcheck flake
Seen it a few times, the exit code differs but we didn't print the
command output so it hard to tell why podman errors out here.
This just adds the output and does not fix the flake.

https://api.cirrus-ci.com/v1/artifact/task/5368521426731008/html/sys-podman-fedora-41-rootless-host-boltdb.log.html

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 14:23:18 +02:00
48423a615d Merge pull request #25701 from danegsta/danegsta/windowsCpPath
Fix windows path handling in `podman cp`
2025-04-10 16:53:23 +00:00
ca0d7d7a57 Merge pull request #25827 from slp/update-krunkit-0.2.0
Bump bundled krunkit to 0.2.0
2025-04-10 14:54:47 +00:00
0d4a148ee6 Quadlet - allow deleting the network when stopping the service
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-10 10:34:16 -04:00
c2b5be1e8e Merge pull request #25842 from ygalblum/quadlet-exec-reload
Quadlet - Add support for adding ExecReload command
2025-04-10 14:21:27 +00:00
0c311be8f1 Merge pull request #25848 from Luap99/system-pasta
test/system: remove pasta conditional
2025-04-10 14:18:40 +00:00
18db1fd17f Merge pull request #25847 from Luap99/podman-tests-slirp4netns
rpm: require slirp4netns for podman-tests package
2025-04-10 13:45:42 +00:00
72fdc6476d test/system: remove pasta conditional
Sinc v5.0 pasta is the default and if it would not be installed a ton of
tests would already fail. As such these conditional checks are
pointless and can be removed to simplify the tests.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-10 14:36:42 +02:00
6c7179c652 rpm: require slirp4netns for podman-tests package
We have some tests that need it so we should test with it.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-10 14:29:07 +02:00
d5b1eb1cad Merge pull request #25841 from baude/initunits
Correct units in init error message
2025-04-10 12:06:14 +00:00
526aa3aa48 Merge pull request #25839 from timesince/main
chore: make function comment match function name
2025-04-10 10:15:53 +00:00
4aeca9cced Merge pull request #25755 from kolyshkin/unused2
Remove unused code and data structures
2025-04-09 18:58:43 +00:00
fe107ff0ce Quadlet - Add support for adding ExecReload command
Add tests
Update man page

Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-09 14:40:41 -04:00
988e2910d5 Merge pull request #25823 from iphands/main
cmd: Fix help text. --config specifies a dir not a regular file
2025-04-09 17:47:03 +00:00
521b2451c7 Correct units in init error message
When trying to initialize a machine with more memory that the system has
we were outputting an error message in the wrong unit.  It should have
been in MB and B. This was found as part of #25803 but is not the
solution for that issue.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-04-09 09:50:26 -05:00
ce7db6e455 Merge pull request #25835 from Luap99/maintainers
MAINTAINERS.md: sort by role and add nalind to OWNERS
2025-04-09 13:18:02 +00:00
7cbad232fe chore: make function comment match function name
Signed-off-by: timesince <seekseat@icloud.com>
2025-04-09 19:51:21 +08:00
671b240236 Merge pull request #25831 from Luap99/test-doc
update hack/bats to not PASS NOP env and update test README with more system test info
2025-04-09 00:59:18 +00:00
9a723ff9f5 Fix windows path handling in podman cp
Fixes: #14862

Signed-off-by: David Negstad <David.Negstad@microsoft.com>
2025-04-08 15:23:08 -07:00
76a4fdc358 cmd: Fix help text. --config specifies a dir not a regular file
This `--config` option was initially added here:
4e4c3e3dbf

Under the hood this simply modifies env to set DOCKER_CONFIG=<passed
in string>

The DOCKER_CONFIG env var is used as a directory that contains
multiple config files... of which podman and container libs probably
only use `$DIR/config.json`.
See: https://docs.docker.com/reference/cli/docker/#environment-variables

The old CMD and help text was misleading... if we point the at a
regular file we can see errors like:
```
$ touch /tmp/foo/tmpcr9zrx71
$ /bin/podman --config /tmp/foo/tmpcr9zrx71 build -t foobar:latest
Error: creating build container: initializing source docker://quay.io/centos/centos:stream9: getting username and password: reading JSON file "/tmp/foo/tmpcr9zrx71/config.json": open /tmp/foo/tmpcr9zrx71/config.json: not a directory
```
^^ In this case we had created `/tmp/foo/tmpcr9zrx71` as a regular file.

Signed-off-by: Ian Page Hands <iphands@gmail.com>
2025-04-08 13:53:34 -07:00
b2e45129b8 .github/labeler: add governance label automatically
We don't have anything CI wise to enforce proper reviews for governance
changes but we can easily label a PR so that should raise more
awareness.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-08 19:40:35 +02:00